Aruba Certified ClearPass Professional V6.7 (HPE6-A68)Demo

By HP · Question Mode

QuestionQ10

Guest

A bank wants to deploy ClearPass Guest with web-login authentication so its customers can self-register on the network and obtain network access when meeting with bank employees. However, the bank has security concerns.

Which statements are true?

Choose three
  • A If HTTPS is used for the web login page, after authentication is completed guest Internet traffic will all be encrypted as well.
  • B During web login authentication, if HTTPS is used for the web login page, guest credentials will be encrypted.
  • C After authentication, an IPSEC VPN on the guest's client be used to encrypt Internet traffic.
  • D HTTPS should never be used for Web Login Page authentication.
  • E If HTTPS is used for the web login page, after authentication is completed some guest Internet traffic may be unencrypted.
Explanation

HTTPS encrypts communication with the captive portal, protecting credentials submitted during web-login authentication. That HTTPS session does not encrypt all traffic the guest generates after authentication, so some guest traffic can remain unencrypted. An IPsec VPN running on the guest client can encrypt traffic carried through its VPN tunnel.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!